| Description | This article describes how to fix an issue where Application Name SSL blocks a website. |
| Scope | FortiGate. |
| Solution |
The forward logs will show that the site is blocked by UTM: specifically, the Application Name SSL.
In this example, an examination of Log & Report -> Security Events -> SSL revealed that the site is being blocked because of a certificate-probe-fail.
As a workaround, configure the following settings on the FortiGate:
config firewall ssl-ssh-profile edit "name" config ssl set cert-probe-failure allow end The settings for the certificate probe may have to be changed. If using SD-WAN for example, this should be specified in the probe configuration.
Follow this article for more info on how to troubleshoot the 'cert-probe-failure'. |
